KnowledgeBase: You receive “the mS-DS-ConsistencyGuid attribute is already in use” when you change the source anchor on a Staging Mode Azure AD Connect installation

In environments with multiple Azure AD Connect installations, sometimes, you experience unexpected behavior. For instance, when you want to change the source anchor from objectGUID to mS-DS-ConsistencyGuid for your Hybrid Identity implementation. The situation An organization leverages multiple Azure AD Connect installations. One installation is the actively synchronizing Azure AD Connect installation, the other installations … Continue reading "KnowledgeBase: You receive “the mS-DS-ConsistencyGuid attribute is already in use” when you change the source anchor on a Staging Mode Azure AD Connect installation"

Azure AD Connect v1.5.18.0 brings mS-DS-ConsistencyGUID as source anchor for Groups

Yesterday, a new version of Azure AD Connect was released: version 1.5.18.0. This is the first release in the 1.5.x branch of Azure AD Connect. Azure AD Connect is Microsoft’s free Hybrid Identity bridge product to synchronize objects and their attributes from on-premises Active Directory Domain Services (AD DS) environments and LDAP v3-compatible directories to … Continue reading "Azure AD Connect v1.5.18.0 brings mS-DS-ConsistencyGUID as source anchor for Groups"

Azure AD Connect: objectGUID vs. mS-DS-ConsistencyGuid, Part 3

In the first part of this series, I’ve explained how Azure AD Connect version 1.1.553.0 and beyond allows you to switch from objectGUID to mS-DS-ConsistencyGuid as the source anchor attribute , the benefits of doing so and what you may and may not expect when you make the switch. Now that I’ve shown you the … Continue reading "Azure AD Connect: objectGUID vs. mS-DS-ConsistencyGuid, Part 3"

Azure AD Connect: objectGUID vs. mS-DS-ConsistencyGuid, Part 2

In the first part of this series, I’ve explained how Azure AD Connect version 1.1.553.0 and beyond allows you to switch from objectGUID to mS-DS-ConsistencyGuid as the source anchor attribute, the benefits of doing so and what you may and may not expect when you make the switch. In this second part, I’ll share the … Continue reading "Azure AD Connect: objectGUID vs. mS-DS-ConsistencyGuid, Part 2"

Azure AD Connect 1.1.561.0 finalizes Automatic Upgrade scenario changes and the move to mS-DS-ConsistencyGuid

Yesterday, Microsoft released version 1,1.561.0 of Azure AD Connect, its free Hybrid Identity bridge product to synchronize objects and their attributes from on-premises Active Directory Domain Services (AD DS) environments to Azure Active Directory. This version is hot on the heels of version 1.1.557.0, because it features some fixes for organization who recently made the … Continue reading "Azure AD Connect 1.1.561.0 finalizes Automatic Upgrade scenario changes and the move to mS-DS-ConsistencyGuid"

Azure AD Connect: objectGUID vs. mS-DS-ConsistencyGuid, Part 1

The Azure AD Connect Team has decided to move Azure AD Connect’s default source anchor attribute in on-premises Active Directory Domain Services (AD DS) environments from objectGUID to mS-DS-ConsistencyGuid for user objects in Azure AD Connect version 1.1.553.0, and up. When you’ve been using Azure AD Connect to synchronize objects between your on-premises Active Directory … Continue reading "Azure AD Connect: objectGUID vs. mS-DS-ConsistencyGuid, Part 1"

HOWTO: Attach a previously sync’ed Azure AD Tenant to a new AD Forest

This week, I was contacted by an organization who were in the process of starting anew with Active Directory Domain Services (AD DS). The old Active Directory forest was too … old, basically. It showed signs of problems around attribute integrity, schema extension bloat and delegation defaults from the 00’s. The challenge I assisted with, … Continue reading "HOWTO: Attach a previously sync’ed Azure AD Tenant to a new AD Forest"

Fun with Veeam’s Active Directory Explorer’s LDAP Filter

Being serious about Disaster Recovery means taking into account events like 9/11. Being serious about Active Directory means being serious about Backup and Restore. But… All work and no play makes Jack a dull boy. That’s why sometimes you need to have a little fun. For fun times’ sake, let’s look at the LDAP Filter … Continue reading "Fun with Veeam’s Active Directory Explorer’s LDAP Filter"

Azure AD Connect fixes an issue when you’ve cloned the ‘In from AD–Group Join’ sync rule before Azure AD Connect v1.5.20.0

Azure AD Connect version 1.5.18.0 introduced a new feature: mS-DS-ConsistencyGUID as the source anchor for groups. Now, as organizations are upgrading to the new version, some overlooked scenarios rear their heads. Azure AD Connect version 1.5.22.0 is here to fix an issue when you’ve cloned a synchronization rule.   What’s Fixed Version 1.5.22.0 addresses an … Continue reading "Azure AD Connect fixes an issue when you’ve cloned the ‘In from AD–Group Join’ sync rule before Azure AD Connect v1.5.20.0"

Azure AD Connect version 1.5.20.0 fixes an issue with Group Filtering

Hot on the heels of Azure AD Connect version 1.5.18.0, Microsoft is releasing a new version of Azure AD Connect to fix an issue introduced in that first version of this 1.5.x.x branch of Azure AD Connect versions. This is an important version if your organization has deployed Group Filtering.    About Azure AD Connect … Continue reading "Azure AD Connect version 1.5.20.0 fixes an issue with Group Filtering"